GDPR m.46 Kaynak Fihristi

Data Protection Commissioner v Facebook Ireland Limited and Maximillian Schrems

Court of Justice of the European Union, Data Protection Commissioner v Facebook Ireland Limited and Maximillian Schrems, ECLI:EU:C:2020:559, 2020-07-16

Recommendations 01/2020 on measures that supplement transfer tools to ensure compliance with the EU level of protection of personal data

European Data Protection Board, Recommendations 01/2020 on measures that supplement transfer tools to ensure compliance with the EU level of protection of personal data

Guidelines 05/2021 on the Interplay between the application of Article 3 and the provisions on international transfers as per Chapter V of the GDPR

European Data Protection Board, Guidelines 05/2021 on the Interplay between the application of Article 3 and the provisions on international transfers as per Chapter V of the GDPR

Part 2

Part 2, 2002-01-01

Opinion 1/2006 on the application of EU data protection rules to internal whistleblowing schemes in the fields of accounting, internal accounting controls, auditing matters, fight against bribery, banking and financial crime (WP117)

Opinion 1/2006 on the application of EU data protection rules to internal whistleblowing schemes in the fields of accounting, internal accounting controls, auditing matters, fight against bribery, banking and financial crime (WP117), 2006-01-01

Opinion 01/2016 on the EU – U.S. Privacy Shield draft adequacy decision (WP238)

Opinion 01/2016 on the EU – U.S. Privacy Shield draft adequacy decision (WP238), 2016-01-01

Second opinion 4/2009 on the World Anti-Doping Agency (WADA) International Standard for the Protection of Privacy and Personal Information, on related provisions of the WADA Code and on other privacy issues in the context of the fight against doping in sport by WADA and (national) anti-doping organizations (WP162)

Second opinion 4/2009 on the World Anti-Doping Agency (WADA) International Standard for the Protection of Privacy and Personal Information, on related provisions of the WADA Code and on other privacy issues in the context of the fight against doping in sport by WADA and (national) anti-doping organizations (WP162), 2009-01-01

Working document 01/2014 on "Draft ad hoc contractual clauses “EU data processor to non-EU sub-processor" (WP214)

Working document 01/2014 on "Draft ad hoc contractual clauses “EU data processor to non-EU sub-processor" (WP214), 2014-01-01

Opinion 10/2007 on the 8th Directive on Statutory Audits by the Article 29 Working Party (WP143)

Opinion 10/2007 on the 8th Directive on Statutory Audits by the Article 29 Working Party (WP143), 2007-01-01

Opinion 7/2001 on the Draft Commission Decision (version 31 August 2001) on Standard Contractual Clauses for the transfer of Personal Data to data processors established in third countries under Article 26(4) of Directive 95/46 (WP47)

Opinion 7/2001 on the Draft Commission Decision (version 31 August 2001) on Standard Contractual Clauses for the transfer of Personal Data to data processors established in third countries under Article 26(4) of Directive 95/46 (WP47), 2001-01-01

Opinion 15/2011 Consent (WP187)

Opinion 15/2011 Consent (WP187), 2011-01-01

Working Document on Binding Corporate Rules for Controllers (wp256rev.01)

Working Document Setting Forth a Co-Operation Procedure for Issuing Common Opinions on “Contractual clauses” Considered as compliant with the EC Model Clauses (WP226)

Working Document Setting Forth a Co-Operation Procedure for Issuing Common Opinions on “Contractual clauses” Considered as compliant with the EC Model Clauses (WP226), 2014-01-01

Third Annual report (WP35)

Third Annual report (WP35), 2000-01-01

Explanatory Document on the Processor Binding Corporate Rules (WP204)

Explanatory Document on the Processor Binding Corporate Rules (WP204), 2015-01-01

Opinion 06/2014 on the "Notion of legitimate interests of the data controller under Article 7 of Directive 95/46/EC" (WP217)

Opinion 06/2014 on the "Notion of legitimate interests of the data controller under Article 7 of Directive 95/46/EC" (WP217), 2014-01-01

Working Document 02/2012 setting up a table with the elements and principles to be found in Processor Binding Corporate Rules (WP195)

Working Document 02/2012 setting up a table with the elements and principles to be found in Processor Binding Corporate Rules (WP195), 2012-01-01

Press release - Plenary Meeting June 2017

Opinion 6/2002 on transmission of Passenger Manifest Information and other data from Airlines to the United States (WP66)

Opinion 6/2002 on transmission of Passenger Manifest Information and other data from Airlines to the United States (WP66), 2002-01-01

Working Document 1/2009 on pre-trial discovery for cross border civil litigation (WP158)

Working Document 1/2009 on pre-trial discovery for cross border civil litigation (WP158), 2009-01-01

Letter of the Chair of the ART 29 WP re ESMA

Opinion 6/2009 on the level of protection of personal data in Israel (WP165)

Opinion 6/2009 on the level of protection of personal data in Israel (WP165), 2009-01-01

Working Document on Frequently Asked Questions (FAQs) related to Binding Corporate Rules

Working Document on Frequently Asked Questions (FAQs) related to Binding Corporate Rules, 2008-01-01

The Future of Privacy: Joint contribution to the Consultation of the European Commission on the legal framework for the fundamental right to protection of personal data (WP168)

The Future of Privacy: Joint contribution to the Consultation of the European Commission on the legal framework for the fundamental right to protection of personal data (WP168), 2009-01-01

Guidelines on Consent under Regulation 2016/679 (wp259rev.01)

Article 29 Data Protection Working Party, Guidelines on Consent under Regulation 2016/679 (wp259rev.01)

Opinion 10/2006 on the processing of personal data by the Society for Worldwide Interbank Financial Telecommunication (SWIFT) (WP128)

Opinion 10/2006 on the processing of personal data by the Society for Worldwide Interbank Financial Telecommunication (SWIFT) (WP128), 2006-01-01

Working Document on Binding Corporate Rules for Processors (wp257rev.01)

Article 29 Data Protection Working Party, Working Document on Binding Corporate Rules for Processors (wp257rev.01)

Opinion 01/2012 on the data protection reform proposals (WP191)

Opinion 01/2012 on the data protection reform proposals (WP191), 2012-01-01

Working Document (WP131)

Working Document (WP131), 2007-01-01

Recommendation 2/2001 on certain minimum requirements for collecting personal data on-line in the European Union (WP43)

Recommendation 2/2001 on certain minimum requirements for collecting personal data on-line in the European Union (WP43), 2001-01-01

Opinion 1/2001 on the Draft Commission Decision on Standard Contractual Clauses for the transfer of Personal Data to third countries under Article 26(4) of Directive 95/46 (WP38)

Opinion 1/2001 on the Draft Commission Decision on Standard Contractual Clauses for the transfer of Personal Data to third countries under Article 26(4) of Directive 95/46 (WP38), 2001-01-01

Working document on a common interpretation of Article 26(1) of Directive 95/46/EC of 24 October 1995 (WP114)

Working document on a common interpretation of Article 26(1) of Directive 95/46/EC of 24 October 1995 (WP114), 2005-01-01

Working document on Frequently Asked Questions (FAQs) related to Binding Corporate Rules - wp155rev05

Opinion 3/2009 on the Draft Commission Decision on standard contractual clauses for the transfer of personal data to processors established in third countries, under Directive 95/46/EC (data controller to data processor) (WP161)

Opinion 3/2009 on the Draft Commission Decision on standard contractual clauses for the transfer of personal data to processors established in third countries, under Directive 95/46/EC (data controller to data processor) (WP161), 2009-01-01

Fourth Annual Report on the situation regarding the protection of individuals with regard to the processing of personal data and privacy in the Community and in Third Countries covering the year 1999 (WP46)

Fourth Annual Report on the situation regarding the protection of individuals with regard to the processing of personal data and privacy in the Community and in Third Countries covering the year 1999 (WP46), 2001-01-01

Opinion 6/2007 on data protection issues related to the Consumer Protection Cooperation System (CPCS) (WP139)

Opinion 6/2007 on data protection issues related to the Consumer Protection Cooperation System (CPCS) (WP139), 2007-01-01

Opinion 05/2012 on Cloud Computing (WP196)

Opinion 05/2012 on Cloud Computing (WP196), 2012-01-01

Working Document on surveillance of electronic communications for intelligence and national security purposes (WP228)

Working Document on surveillance of electronic communications for intelligence and national security purposes (WP228), 2014-01-01

Working Document 01/2016 on the justification of interferences with the fundamental rights to privacy and data protection through surveillance measures when transferring personal data (European Essential Guarantees) (WP237)

Working Document 01/2016 on the justification of interferences with the fundamental rights to privacy and data protection through surveillance measures when transferring personal data (European Essential Guarantees) (WP237), 2016-01-01

Opinion 2/2010 on online behavioural advertising (WP171)

Opinion 2/2010 on online behavioural advertising (WP171), 2010-01-01

Avis n° 133/2019 du 3 juillet 2019

Avis n° 133/2019 du 3 juillet 2019, 2019-01-01

Avis n° 121/2019 du 19 juin 2019

Avis n° 121/2019 du 19 juin 2019, 2019-01-01

Avis n° 29/1998 du 25 septembre 1998

Avis n° 29/1998 du 25 septembre 1998, 1998-01-01

Avis n° 84/2020 du 11 septembre 2020

Avis n° 84/2020 du 11 septembre 2020, 2020-01-01

Modèle de contrat-type de la Commission européenne 2001/497/CE

Modèle de contrat-type de la Commission européenne 2001/497/CE, 2001-01-01

[Document Externe] Rapport Benchmark moyens personnels et financiers

[Document Externe] Rapport Benchmark moyens personnels et financiers, 2021-01-01

Avis n° 113/2019 du 5 juin 2019

Avis n° 113/2019 du 5 juin 2019, 2019-01-01

Avis n° 4/2004 du 15 mars 2004

Avis n° 4/2004 du 15 mars 2004, 2004-01-01

Avis n° 11/2013 du 24 avril 2013

Avis n° 11/2013 du 24 avril 2013, 2013-01-01

Rapport annuel 2023

Rapport annuel 2023, 2024-01-01

Rapport annuel 2024

Rapport annuel 2024, 2025-01-01

Avis n° 103/2021 du 15 juin 2021

Avis n° 103/2021 du 15 juin 2021, 2021-01-01

Avis n° 38/2003 du 25 septembre 2003

Avis n° 38/2003 du 25 septembre 2003, 2003-01-01

Avis n° 01/2007 du 17 janvier 2007

Avis n° 01/2007 du 17 janvier 2007, 2007-01-01

Avis n° 248/2021 du 17 décembre 2021

Avis n° 248/2021 du 17 décembre 2021, 2021-01-01

Avis n° 121/2021 du 8 juillet 2021

Avis n° 121/2021 du 8 juillet 2021, 2021-01-01

Avis n° 176/2019 du 8 novembre 2019

Avis n° 176/2019 du 8 novembre 2019, 2019-01-01

Avis n° 136/2021 du 24 août 2021

Avis n° 136/2021 du 24 août 2021, 2021-01-01

Avis n° 21/2005 du 30 novembre 2005

Avis n° 21/2005 du 30 novembre 2005, 2005-01-01

Avis n° 47/2006 du 20 décembre 2006

Avis n° 47/2006 du 20 décembre 2006, 2006-01-01

Avis n° 37/2006 du 27 septembre 2006

Avis n° 37/2006 du 27 septembre 2006, 2006-01-01

Note d’information sur le mécanisme de recours dans le cadre du Data Privacy Framework

Note d’information sur le mécanisme de recours dans le cadre du Data Privacy Framework, 2024-01-01

Notions de responsable de traitement / sous-traitant au regard du Règlement EU 2016/679

Notions de responsable de traitement / sous-traitant au regard du Règlement EU 2016/679, 2018-01-01

Avis n° 18/1998 du 25 mai 1998

Avis n° 18/1998 du 25 mai 1998, 1998-01-01

Avis n° 231/2022 du 29 septembre 2022

Avis n° 231/2022 du 29 septembre 2022, 2022-01-01

Modèle de contrat-type de la Commission européenne 2004/915/CE

Modèle de contrat-type de la Commission européenne 2004/915/CE, 2004-01-01

Anwendungshinweise zu den Anforderungen an Datenübermittlungen an Drittländer im Rahmen der wissenschaftlichen Forschung zu medizinischen Zwecken

Anwendungshinweise zu den Anforderungen an Datenübermittlungen an Drittländer im Rahmen der wissenschaftlichen Forschung zu medizinischen Zwecken, 2025-09-01

13.12.2019 - Report on Experience Gained in the Implementation of the GDPR

Videokonferenzsysteme

13.12.2019 - Erfahrungsbericht der unabhängigen Datenschutzaufsichtsbehörden des Bundes und der Länder zur Anwendung der DS-GVO

06.11.2023 - Positionspapier zu cloudbasierten digitalen Gesundheitsanwendungen

07.12.2022 - Abschlussbericht der Arbeitsgruppe DSK „Microsoft-Onlinedienste“

Empfehlungen für Informationspflichten bei Datenübermittlungen an Drittländer im Rahmen der wissenschaftlichen Forschung zu medizinischen Zwecken (Anlage zu Orientierungshilfe zu Anwendungshinweisen)

Empfehlungen für Informationspflichten bei Datenübermittlungen an Drittländer im Rahmen der wissenschaftlichen Forschung zu medizinischen Zwecken (Anlage zu Orientierungshilfe zu Anwendungshinweisen), 2025-09-01

Adfærdskodekser som redskab til overførsler (Vejledning 4/2021)

Retten til indsigt (Vejledning 01/2022)

Samspillet mellem anvendelsen af artikel 3 og bestemmelserne om overførsel til tredjelande i kapitel V i databeskyttelsesforordningen (Vejledning 5/2021)

Bindende virksomhedsregler (BCR) for databehandlere, elementer og principper, der skal være indeholdt (wp257)

Tredjelandsoverførsler, overførsel af personoplysninger mellem offentlige myndigheder (Vejledning 2/2020)

Tredjelandsoverførsler, artikel 37 i retshåndhævelsesdirektivet (Vejledning 01/2023)

Adfærdskodekser (Vejledning 1/2019)

Behandling af personoplysninger baseret på artikel 6, stk. 1, litra f (Vejledning 1/2024)

Certificering som et redskab til overførsler (Vejledning 07/2022)

Opinion 02/2022 on the draft decision of the French Supervisory Authority regarding the Controller Binding Corporate Rules of the WEBHELP Group

Opinion 29/2020 on the draft decision of the Lower Saxony Supervisory Authority regarding the Controller Binding Corporate Rules of Novelis Group

Opinion 05/2024 on the draft decision of the Spanish Supervisory Authority regarding the Controller Binding Corporate Rules of the MAPFRE Group

Opinion 31/2025 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the Arcadis Group

Opinion 26/2022 on the draft decision of the Data Protection Authority of Bavaria for the Private Sector regarding the Controller Binding Corporate Rules of the Munich Re Reinsurance Group

Opinion 27/2021 on the draft decision of the Supervisory Authority of North Rhine-Westphalia (Germany) regarding the Processor Binding Corporate Rules of the Internet Initiative Japan Group

Opinion 22/2025 on the draft decision of the Luxembourg Supervisory Authority regarding the Controller Binding Corporate Rules of the Ferrero Group

Opinion 32/2020 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of Equinix

Opinion 7/2024 on the draft decision of the German North Rhine Westphalia Supervisory Authority regarding the EU Cloud Service Data Protection (Auditor) certification criteria

EDPB Response to MEP Moritz Körner regarding the relevance of encryption bans in third countries

Opinion 16/2025 regarding the draft decision of the German North Rhine Westphalia Supervisory Authority regarding Trusted Site Data Privacy (TÜV IT) certification criteria

Opinion 25/2025 on the decision of the Polish Supervisory Authority regarding the Processor Binding Corporate Rules of the BOX Group

Opinion 33/2023 on the draft decision of the Hesse Supervisory Authority (Germany) regarding the Controller Binding Corporate Rules of the Cerner Group

Opinion 07/2022 on the draft decision of the Hungarian Supervisory Authority regarding the Controller Binding Corporate Rules of MOL Group

EDPB Annual Report 2025

Opinion 14/2026 on the Europrivacy certification criteria regarding their approval by the Board as European Data Protection Seal pursuant to Article 42.5 GDPR

Opinion 28/2021 on the draft decision of the Belgian Supervisory Authority regarding the Controller Binding Corporate Rules of Oregon Tool, Inc (formerly “Blount”)

Frequently Asked Questions on the judgment of the Court of Justice of the European Union in Case C-311/18 - Data Protection Commissioner v Facebook Ireland Ltd and Maximillian Schrems

Guidelines 03/2020 on the processing of data concerning health for the purpose of scientific research in the context of the COVID-19 outbreak

Opinion 3/2025 on the draft decision of the French Supervisory Authority (FR SA) regarding the “Lexing GDPR certification criteria”

Opinion 26/2021 on the draft decision of the Supervisory Authority of North Rhine-Westphalia (Germany) regarding the Controller Binding Corporate Rules of the Internet Initiative Japan Group

Opinion 08/2022 on the draft decision of the Danish Supervisory Authority regarding the Controller Binding Corporate Rules of Bioclinica Group

Opinion 19/2022 on the draft decision of the Baden- Württemberg (Germany) Supervisory Authority regarding the Controller Binding Corporate Rules of the Mercedes- Benz Group

Opinion 19/2023 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the American Express Global Business Travel Group

Opinion 01/2021 on the draft decision of the Danish Supervisory Authority regarding the Controller Binding Corporate Rules of Saxo Bank Group

Opinion 16/2026 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the Infor Group

Opinion 01/2025 on the draft decision of the French Supervisory Authority regarding the Controller Binding Corporate Rules of the Coface Group

Guidelines 2/2020 on articles 46 (2) (a) and 46 (3) (b) of Regulation 2016/679 for transfers of personal data between EEA and non-EEA public authorities and bodies

Opinion 25/2024 on the draft decision of the Hesse Supervisory Authority (Germany) regarding the Processor Binding Corporate Rules of the Infosys Group

Opinion 34/2025 on the draft decision of the Greek Supervisory Authority regarding C.E.C.L certification criteria

Opinion 19/2026 on the draft decision of the Dutch Supervisory Authority regarding the Processor Binding Corporate Rules of the Rubrik Group

Opinion 27/2024 on the Brand Compliance criteria of certification regarding their approval by the Board as European Data Protection Seal pursuant to Article 42.5 (GDPR)

Opinion 14/2019 on the draft Standard Contractual Clauses submitted by the DK SA (Article 28(8) GDPR)

EDPB Annual Report 2021

Opinion 9/2026 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the Jacobs Douwe Egberts Group

Opinion 19/2024 on the EuroPrise criteria of certification regarding their approval by the Board as European Data Protection Seal pursuant to Article 42.5 (GDPR)

Opinion 02/2021 on the draft decision of the Swedish Supervisory Authority regarding the Controller Binding Corporate Rules of Elanders Group

Opinion 15/2025 on the draft decision of the Austrian Supervisory Authority (AT SA) regarding the certification criteria of BDO Consulting GmbH

Binding Decision 3/2022 on the dispute submitted by the Irish SA on Meta Platforms Ireland Limited and its Facebook service (Art. 65 GDPR)

Opinion 30/2023 on the draft decision of the French Supervisory Authority regarding the Processor Binding Corporate Rules of the Sodexo Group

Statement 02/2022 on personal data transfers to the Russian Federation

Statement 02/2022 on personal data transfers to the Russian Federation

Binding Decision 4/2022 on the dispute submitted by the Irish SA on Meta Platforms Ireland Limited and its Instagram service (Art. 65 GDPR)

Opinion 24/2022 on the draft decision of the Swedish Supervisory Authority regarding the Processor Binding Corporate Rules of the Samres Group

EDPB Document setting forth a Cooperation Procedure for the Authorisation of Contractual Clauses under Article 46(3)(a) GDPR and for the Adoption of Standard Contractual Clauses under Article 46(2)(d) GDPR

Statement 4/2025 on the European Commission’s Recommendation on draft non-binding model contractual terms on data sharing under the Data Act

Opinion 1/2026 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the Heineken Group

Information note on data transfers under the GDPR to the United Kingdom after the transition period - update 13/01/2021

Opinion 32/2025 on the draft decision of the Irish Supervisory Authority regarding the Controller Binding Corporate Rules of the CSG Group

Opinion 08/2021 on the draft decision of the Baden- Wurttemberg Supervisory Authority regarding the Processor Binding Corporate Rules of Luxoft Group

Opinion 20/2023 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the Comcast Corporation Group

Opinion 06/2022 on the draft decision of the Irish Supervisory Authority regarding the Controller Binding Corporate Rules of Groupon International Limited

Opinion 8/2023 on the draft decision of the Irish Supervisory Authority regarding the Processor Binding Corporate Rules of Autodesk Group

Opinion 6/2020 on the draft decision of the Spanish Supervisory Authority regarding the Controller Binding Corporate Rules of Fujikura Automotive Europe Group (FAE Group)

Opinion 07/2025 regarding the European Commission Draft Implementing Decision pursuant to Regulation (EU) 2016/679 on the adequate protection of personal data by the European Patent Organisation

Opinion 13/2024 on the draft decision of the Supervisory Authority of Liechtenstein regarding the Controller Binding Corporate Rules of the Ivoclar Vivadent Group

Opinion 20/2026 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the Fluor Group

Opinion 29/2025 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the Illumina Group

Opinion 25/2022 regarding the European Privacy Seal (EuroPriSe ) certification criteria for the certification of processing operations by processors

Opinion 25/2022 regarding the European Privacy Seal (EuroPriSe) certification criteria for the certification of processing operations by processors

Opinion 28/2020 on the draft decision of the Spanish Supervisory Authority regarding the Controller Binding Corporate Rules of Iberdrola Group

Legal study on government access to data in third countries - Mexico and Turkey

Study on the enforcement of GDPR obligations against entities established outside the EEA but falling under Article 3(2) GDPR

Opinion 2/2025 on the draft decision of the Swedish Supervisory Authority regarding the Controller Binding Corporate Rules of the Alfa Laval Group

Coordinated Enforcement Action, use of cloud-based services by the public sector

Opinion 24/2023 on the draft decision of the French Supervisory Authority regarding the Controller Binding Corporate Rules of the Nestlé Group

Opinion 20/2024 on the draft decision of the North Rhine-Westphalian Supervisory Authority regarding the Controller Binding Corporate Rules of the Viega Group

Opinion 22/2022 on the draft decision of the Liechtenstein Supervisory Authority regarding the Controller Binding Corporate Rules of Hilti Group

Opinion 2/2024 on the draft decision of the Spanish Supervisory Authority regarding the Controller Binding Corporate Rules of the TELEFÓNICA Group

Legal study on government access to data in third countries - Brazil

Opinion 17/2026 on the draft decision of the Dutch Supervisory Authority regarding the Processor Binding Corporate Rules of the Infor Group

Guidelines 1/2019 on Codes of Conduct and Monitoring Bodies under Regulation 2016/679

European Data Protection Board, Guidelines 1/2019 on Codes of Conduct and Monitoring Bodies under Regulation 2016/679

Guidelines 01/2022 on data subject rights - Right of access

European Data Protection Board, Guidelines 01/2022 on data subject rights - Right of access

EDPB Annual Report 2018

Opinion 11/2026 on the draft decision of the Belgian Supervisory Authority regarding the Controller Binding Corporate Rules of the Kuwait Petroleum Group

Information note on data transfers under the GDPR to the United Kingdom after the transition period

Opinion 16/2023 on the draft decision of the Irish Supervisory Authority regarding the Controller Binding Corporate Rules of the Informatica Group

Opinion 17/2025 on the draft decision of the Irish Supervisory Authority regarding the Controller Binding Corporate Rules of the Shopify Group

Opinion 4/2025 on the draft decision of the Finnish Supervisory Authority regarding the Controller Binding Corporate Rules of the Nokia Group

Opinion 16/2024 on the draft decision of the Spanish Supervisory Authority regarding the Controller Binding Corporate Rules of the AVATURE Group

Opinion 18/2022 on the draft decision of the Baden- Württemberg (Germany) Supervisory Authority regarding the Controller Binding Corporate Rules of the Daimler Truck Group

Opinion 24/2025 on the decision of the Polish Supervisory Authority regarding the Controller Binding Corporate Rules of the BOX Group

Opinion 30/2021 on the draft decision of the Spanish Supervisory Authority regarding the Controller Binding Corporate Rules of the COLT Group

EDPB Document Setting Forth a Co-Operation procedure for the approval of Binding Corporate Rules for controllers and processors

Opinion 31/2022 on the draft decision of the Slovak Supervisory Authority regarding the Processor Binding Corporate Rules of Piano Group

Opinion 27/2023 on the draft decision of the French Supervisory Authority regarding the Processor Binding Corporate Rules of the Tessi Group

Opinion 03/2022 on the draft decision of the French Supervisory Authority regarding the Processor Binding Corporate Rules of the WEBHELP Group

Opinion 22/2021 on the draft decision of the French Supervisory Authority regarding the Processor Binding Corporate Rules of the CGI Group

Opinion 05/2021 on the draft Administrative Arrangement for the transfer of personal data between the Haut Conseil du Commissariat aux Comptes (H3C) and the Public Company Accounting Oversight Board (PCAOB)

Statement on the end of the Brexit transition period

Opinion 21/2021 on the draft decision of the French Supervisory Authority regarding the Controller Binding Corporate Rules of the CGI Group

Opinion 34/2023 on the draft decision of the Hesse Supervisory Authority (Germany) regarding the Processor Binding Corporate Rules of the Cerner Group

EDPB contribution to the 6th round of consultations on the draft Second Additional Protocol to the Council of Europe Budapest Convention on Cybercrime

Opinion 17/2023 on the draft decision of the Irish Supervisory Authority regarding the Processor Binding Corporate Rules of the Informatica Group

Opinion 18/2025 on the draft decision of the Irish Supervisory Authority regarding the Processor Binding Corporate Rules of the Shopify Group

Opinion 28/2022 on the Europrivacy criteria of certification regarding their approval by the Board as European Data Protection Seal pursuant to Article 42.5 (GDPR)

Opinion 31/2021 on the draft decision of the Spanish Supervisory Authority regarding the Processor Binding Corporate Rules of the COLT Group

Report of the work undertaken by the ChatGPT Taskforce

Guidelines 2/2018 on derogations of Article 49 under Regulation 2016/679

Opinion 12/2026 on the draft decision of the Spanish Supervisory Authority regarding the Controller Binding Corporate Rules of the Santander Group

Opinion 10/2023 on the draft decision of the Spanish Supervisory Authority regarding the Controller Binding Corporate Rules of the PROSEGUR Group

Opinion 27/2022 on the draft decision of the French Supervisory Authority regarding the Processor Binding Corporate Rules of LEYTON Group

Opinion 24/2020 on the draft decision of the Norwegian Supervisory Authority regarding the Controller Binding Corporate Rules of Jotun

Opinion 14/2021 regarding the European Commission Draft Implementing Decision pursuant to Regulation (EU) 2016/679 on the adequate protection of personal data in the United Kingdom

Recommendations 1/2022 on the Application for Approval and on the elements and principles to be found in Controller Binding Corporate Rules (Art. 47 GDPR)

European Data Protection Board, Recommendations 1/2022 on the Application for Approval and on the elements and principles to be found in Controller Binding Corporate Rules (Art. 47 GDPR)

Opinion 36/2023 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the Booking.com Group

Opinion 21/2026 on the draft decision of the Irish Supervisory Authority regarding the Controller Binding Corporate Rules of the Flutter Group

Opinion 3/2026 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the FrieslandCampina Group

Opinion 04/2021 on the draft decision of the Belgian Supervisory Authority regarding the Processor Binding Corporate Rules of BDO

Opinion 26/2023 on the draft decision of the Romanian Supervisory Authority regarding the Processor Binding Corporate Rules of the OSF Global Services Group

Opinion 15/2026 on the Europrivacy certification criteria regarding their approval by the Board as European Data Protection Seal to be used as tool for transfers pursuant to Articles 42 and 46 GDPR

Opinion 32/2022 on the draft decision of the Danish Supervisory Authority regarding the Controller Binding Corporate Rules of the Ramboll Group

Opinion 3/2024 on the draft decision of the Irish Supervisory Authority regarding the Processor Binding Corporate Rules of the Accenture Group

EDPB Statement 01/2019 on the US Foreign Account Tax Compliance Act (FATCA)

Opinion 35/2023 on the draft decision of the Danish Supervisory Authority regarding the Controller Binding Corporate Rules of the Carlsberg Group

Template Complaint Form to the U.S. Office of the Director of National Intelligence’s Civil Liberties Protection Officer (CLPO)

Opinion 10/2025 on the draft decision of the French Supervisory Authority regarding the Controller Binding Corporate Rules of the Worldline Group

Opinion 07/2021 on the draft decision of the Spanish Supervisory Authority regarding the Controller Binding Corporate Rules of Kumon Group

EDPB Annual Report 2023

Opinion 29/2023 on the draft decision of the French Supervisory Authority regarding the Controller Binding Corporate Rules of the Sodexo Group

Recommendations 1/2025 on the 2027 WADA World Anti-Doping Code

Opinion 14/2024 on the draft decision of the Estonian Supervisory Authority regarding the Processor Binding Corporate Rules of the Mercans Group

Opinion 34/2021 on the draft decision of the Belgian Supervisory Authority regarding the Controller Binding Corporate Rules of Otis

EDPB Annual Report 2022

Opinion 9/2025 on the draft decision of the French Supervisory Authority regarding the Processor Binding Corporate Rules of the Worldline Group

Guidelines 01/2023 on Article 37 Law Enforcement Directive

Opinion 7/2023 on the draft decision of the Irish Supervisory Authority regarding the Controller Binding Corporate Rules of Autodesk Group

Toolbox on essential data protection safeguards for enforcement cooperation between EEA data protection authorities and competent data protection authorities of third countries

Opinion 8/2026 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the IBM Group

Opinion 30/2025 on the draft decision of the Dutch Supervisory Authority regarding the Processor Binding Corporate Rules of the Illumina Group

Opinion 23/2022 on the draft decision of the Swedish Supervisory Authority regarding the Controller Binding Corporate Rules of the Samres Group

EDPB Annual Report 2024

Guidelines 05/2020 on consent under Regulation 2016/679

European Data Protection Board, Guidelines 05/2020 on consent under Regulation 2016/679

Guidelines 04/2021 on Codes of Conduct as tools for transfers

Opinion 28/2025 regarding the European Commission Draft Implementing Decision pursuant to Regulation (EU) 2016/679 on the adequate protection of personal data by Brazil

Opinion 6/2023 on the draft decision of the Danish Supervisory Authority regarding the Controller Binding Corporate Rules of Royal Greenland Group

EDPB Work Programme 2023-2024

Opinion 25/2023 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the SHV Holding N.V. Group

Opinion 15/2024 on the draft decision of the Spanish Supervisory Authority regarding the Processor Binding Corporate Rules of the AVATURE Group

Opinion 15/2019 on the draft decision of the competent supervisory authority of the United Kingdom regarding the Binding Corporate Rules of Equinix Inc.

Opinion 11/2025 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the Signify Group

Opinion 8/2020 on the draft decision of the Irish Supervisory Authority regarding the Controller Binding Corporate Rules of Reinsurance Group of America

Opinion 9/2020 on the draft decision of the Irish Supervisory Authority regarding the Processor Binding Corporate Rules of Reinsurance Group of America

Guidelines 07/2020 on the concepts of controller and processor in the GDPR

European Data Protection Board, Guidelines 07/2020 on the concepts of controller and processor in the GDPR

Opinion 17/2022 on the draft decision of the Spanish Supervisory Authority regarding the Controller Binding Corporate Rules of the ANTOLIN Group

Opinion 21/2022 on the draft decision of the Irish Supervisory Authority regarding the Processor Binding Corporate Rules of the Ellucian Group

Opinion 12/2025 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the ASML Group

Opinion 23/2023 on the draft decision of the Belgian Supervisory Authority regarding the Controller Binding Corporate Rules for customer data of the UPS Group

Contribution of the EDPB to the evaluation of the GDPR under Article 97

Opinion 05/2022 on the draft decision of the Danish Supervisory Authority regarding the Controller Binding Corporate Rules of the Lundbeck Group

EDPB Response to Mr. de Serpa Soares, Under-Secretary-General for Legal Affairs and UN Legal Counsel

Opinion 14/2023 on the draft decision of the Danish Supervisory Authority regarding the Controller Binding Corporate Rules of the Vestas Wind Systems Group

Opinion 26/2024 on the draft decision of the DE Bremen Supervisory Authority regarding the “Catalogue of Criteria for the Certification of IT-supported processing of Personal Data pursuant to art 42 GDPR (‘GDPR – information privacy standard’)” presented

Opinion 28/2023 on the draft decision of the French Supervisory Authority regarding the Controller Binding Corporate Rules of the Servier Group

Opinion 22/2023 on the draft decision of the Belgian Supervisory Authority regarding the Controller Binding Corporate Rules for employee data of the UPS Group

Opinion 33/2021 on the draft decision of the Belgian Supervisory Authority regarding the Controller Binding Corporate Rules of Carrier

Opinion 33/2025 on the draft decision of the Irish Supervisory Authority regarding the Processor Binding Corporate Rules of the CSG Group

Opinion 06/2021 on the draft decision of the Spanish Supervisory Authority regarding the Processor Binding Corporate Rules of Kumon Group

Opinion 23/2024 on the draft decision of the Irish Supervisory Authority regarding the Controller Binding Corporate Rules of the Aptiv Group

Opinion 9/2023 on the draft decision of the Italian Supervisory Authority regarding the Controller Binding Corporate Rules of Vertiv

Opinion 21/2024 on the draft decision of the French Supervisory Authority regarding the Processor Binding Corporate Rules of the Talan Group

Opinion 21/2025 on the draft decision of the Norwegian Supervisory Authority regarding the Controller Binding Corporate Rules of the Mowi Group

Opinion 13/2025 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the Aramex Group

Opinion 2/2026 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the AkzoNobel Group

Opinion 19/2025 on the draft decision of the Luxembourg Supervisory Authority regarding the Controller Binding Corporate Rules of the Northern Trust Group

Opinion 4/2026 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the ABB Group

Opinion 18/2023 on the draft decision of the Belgian Supervisory Authority regarding the Processor Binding Corporate Rules of the Collibra Group

EDPB-EDPS Joint Opinion 2/2021 on standard contractual clauses for the transfer of personal data to third countries

Opinion 09/2022 on the draft decision of the Danish Supervisory Authority regarding the Processor Binding Corporate Rules of Bioclinica Group

Opinion 23/2025 on the draft decision of the French Supervisory Authority regarding the Controller Binding Corporate Rules of the Tessi Group

Opinion 21/2023 on the draft decision of the Belgian Supervisory Authority regarding the Processor Binding Corporate Rules of the UPS Group

Opinion 01/2024 on the draft decision of the Dutch Supervisory Authority regarding the Processor Binding Corporate Rules of the Booking.com Group

Opinion 27/2020 on the draft decision of the Danish Supervisory Authority regarding the Controller Binding Corporate Rules of Coloplast Group

Opinion 29/2022 on the draft decision of the Danish Supervisory Authority regarding the Controller Binding Corporate Rules of the DSV Group

Opinion 16/2019 on the draft decision of the Belgian Supervisory Authority regarding the Binding Corporate Rules of ExxonMobil Corporation

Opinion 30/2022 on the draft decision of the Slovak Supervisory Authority regarding the Controller Binding Corporate Rules of Piano Group

Opinion 20/2022 on the draft decision of the Irish Supervisory Authority regarding the Controller Binding Corporate Rules of the Ellucian Group

Opinion 10/2022 on the draft decision of the Hesse Supervisory Authority (Germany) regarding the Controller Binding Corporate Rules of Fresenius Group

Opinion 09/2021 on the draft decision of the Baden- Wurttemberg Supervisory Authority regarding the Controller Binding Corporate Rules of Luxoft Group

Binding Decision 1/2023 on the dispute submitted by the Irish SA on data transfers by Meta Platforms Ireland Limited for its Facebook service (Art. 65 GDPR)

Legal study on government access to data in third countries - China, India, Russia

Opinion 31/2023 on the draft decision of the French Supervisory Authority regarding the Controller Binding Corporate Rules of the Thalès Group

Opinion 29/2021 on the draft decision of the Belgian Supervisory Authority regarding the Processor Binding Corporate Rules of Oregon Tool, Inc (Formerly “Blount”)

Opinion 04/2022 on the draft decision of the Danish Supervisory Authority regarding the Controller Binding Corporate Rules of Norican Group

EDPB-EDPS Joint Opinion 1/2021 on standard contractual clauses between controllers and processors

Recommendations 02/2020 on the European Essential Guarantees for surveillance measures

Information note on data transfers under the GDPR to the United States after the adoption of the adequacy decision on 10 July 2023

Opinion 14/2025 on the draft decision of the Norwegian Supervisory Authority regarding the Controller Binding Corporate Rules of the Wilh. Wilhelmsen Group

Opinion 18/2026 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the Rubrik Group

Opinion 9/2024 on the draft decision of the Romanian Supervisory Authority regarding the Processor Binding Corporate Rules of the Genpact Group

Opinion 1/2022 on the draft decision of the Luxembourg Supervisory Authority regarding the GDPR – CARPA certification criteria

Opinion 17/2024 on the draft decision of the Spanish Supervisory Authority regarding the Controller Binding Corporate Rules of the FCC Group

Opinion 32/2023 on the draft decision of the French Supervisory Authority regarding the Processor Binding Corporate Rules of the Thalès Group

Opinion 15/2023 on the draft decision of the Dutch Supervisory Authority regarding the Brand Compliance certification criteria

Opinion 06/2026 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the ABN AMRO Bank Group

Opinion 5/2025 on the draft decision of the Finnish Supervisory Authority regarding the Processor Binding Corporate Rules of the Nokia Group

Opinion 20/2025 on the draft decision of the Luxembourg Supervisory Authority regarding the Processor Binding Corporate Rules of the Northern Trust Group

Opinion 10/2026 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the SLB Group

Opinion 5/2026 on the draft decision of the Dutch Supervisory Authority regarding the Processor Binding Corporate Rules of the Arcadis Group

Opinion 22/2024 on certain obligations following from the reliance on processor(s) and sub-processor(s)

EDPB Annual Report 2019

Binding Decision 5/2022 on the dispute submitted by the Irish SA regarding WhatsApp Ireland Limited (Art. 65 GDPR)

Opinion 18/2024 on the draft decision of the Austrian Supervisory Authority regarding DSGVO-zt GmbH certification criteria

Guidelines 07/2022 on certification as a tool for transfers

European Data Protection Board, Guidelines 07/2022 on certification as a tool for transfers

Opinion 7/2026 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the BCD Travel Group

Opinion 03/2021 on the draft decision of the Belgian Supervisory Authority regarding the Controller Binding Corporate Rules of BDO

Statement on the end of the Brexit transition period - update 13/01/2021

Information Note on the Data Privacy Framework redress mechanism for national security purposes

Opinion 8/2025 on the draft decision of the Norwegian Supervisory Authority regarding the Controller Binding Corporate Rules of the Statkraft Group

Opinion 25/2020 on the draft decision of the Swedish Supervisory Authority regarding the Controller Binding Corporate Rules of Tetra Pak

EDPBI:FR:OSS:D:2022:330 — FR SA final decision (Article 44 (General principle for transfers), Article 46 (Transfers subject to appropriate safeguards))

EDPBI:FR:OSS:D:2022:330 — FR SA final decision (Article 44 (General principle for transfers), Article 46 (Transfers subject to appropriate safeguards)), 2022-02-03

EDPBI:SE:OSS:D:2023:825 — SE SA final decision (Article 4 (Definitions), Article 44 (General principle for transfers), Article 46 (Transfers subject to appropriate safeguards))

EDPBI:SE:OSS:D:2023:825 — SE SA final decision (Article 4 (Definitions), Article 44 (General principle for transfers), Article 46 (Transfers subject to appropriate safeguards)), 2023-06-30

EDPBI:NO:OSS:D:2023:853 — NO SA final decision (Article 44 (General principle for transfers))

EDPBI:NO:OSS:D:2023:853 — NO SA final decision (Article 44 (General principle for transfers)), 2023-07-26

EDPBI:FR:OSS:D:2022:345 — FR SA final decision (Article 44 (General principle for transfers), Article 46 (Transfers subject to appropriate safeguards))

EDPBI:FR:OSS:D:2022:345 — FR SA final decision (Article 44 (General principle for transfers), Article 46 (Transfers subject to appropriate safeguards)), 2022-03-02

EDPBI:AT:OSS:D:2022:357 — AT SA final decision (Article 44 (General principle for transfers), Article 45 (Transfers on the basis of an adequacy decision), Article 46 (Transfers subject to appropriate safeguards))

EDPBI:AT:OSS:D:2022:357 — AT SA final decision (Article 44 (General principle for transfers), Article 45 (Transfers on the basis of an adequacy decision), Article 46 (Transfers subject to appropriate safeguards)), 2022-04-22

EDPBI:CY:OSS:D:2022:309 — CY SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject))

EDPBI:CY:OSS:D:2022:309 — CY SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject)), 2022-01-03

EDPBI:NL:OSS:D:2025:3385 — NL SA final decision (Article 45 (Transfers on the basis of an adequacy decision), Article 44 (General principle for transfers), Article 46 (Transfers subject to appropriate safeguards))

EDPBI:NL:OSS:D:2025:3385 — NL SA final decision (Article 45 (Transfers on the basis of an adequacy decision), Article 44 (General principle for transfers), Article 46 (Transfers subject to appropriate safeguards)), 2025-03-25

EDPBI:SE:OSS:D:2023:824 — SE SA final decision (Article 4 (Definitions), Article 44 (General principle for transfers), Article 46 (Transfers subject to appropriate safeguards))

EDPBI:SE:OSS:D:2023:824 — SE SA final decision (Article 4 (Definitions), Article 44 (General principle for transfers), Article 46 (Transfers subject to appropriate safeguards)), 2023-06-30

EDPBI:FR:OSS:D:2024:1255 — FR SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 14 (Information to be provided where personal data have not been obtained from the data subject))

EDPBI:FR:OSS:D:2024:1255 — FR SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 14 (Information to be provided where personal data have not been obtained from the data subject)), 2024-04-08

EDPBI:FR:OSS:D:2022:344 — FR SA final decision (Article 44 (General principle for transfers), Article 46 (Transfers subject to appropriate safeguards))

EDPBI:FR:OSS:D:2022:344 — FR SA final decision (Article 44 (General principle for transfers), Article 46 (Transfers subject to appropriate safeguards)), 2022-03-02

EDPBI:BE:OSS:D:2022:325 — BE SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 7 (Conditions for consent))

EDPBI:BE:OSS:D:2022:325 — BE SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 7 (Conditions for consent)), 2022-02-02

EDPBI:IE:OSS:D:2023:980 — IE SA final decision (Article 15 (Right of access by the data subject), Article 18 (Right to restriction of processing))

EDPBI:IE:OSS:D:2023:980 — IE SA final decision (Article 15 (Right of access by the data subject), Article 18 (Right to restriction of processing)), 2023-10-23

Preguntas frecuentes sobre la anulación del Escudo de Privacidad

Preguntas frecuentes sobre la anulación del Escudo de Privacidad, 2020-07-28

Principios básicos para la contratación y uso de plataformas educativas digitales por las administraciones educativas y centros docentes

Principios básicos para la contratación y uso de plataformas educativas digitales por las administraciones educativas y centros docentes, 2026-03-23

Data Protection Commissioner v Facebook Ireland Limited and Maximillian Schrems

Case C-311/18 Data Protection Commissioner v Facebook Ireland Limited and Maximillian Schrems EU:C:2019:1145, Opinion of AG Saugmandsgaard Øe

Maximillian Schrems v Data Protection Commissioner, joined party: Digital Rights Ireland Ltd

Maximillian Schrems v Data Protection Commissioner, joined party: Digital Rights Ireland Ltd EU:C:2015:650

ECLI:EU:C:2022:43

Case C-37/20 ECLI:EU:C:2022:43 EU:C:2022:43, Opinion of AG Pitruzzella, 2022-01-20

WM and Sovim SA v Luxembourg Business Registers

WM and Sovim SA v Luxembourg Business Registers EU:C:2022:912

Facebook Ireland and Schrems (Protection of individuals with regard to the processing of personal data - Transfers of personal data to third countries for commercial purposes - Judgment) [2020] EUECJ C-311/18

Case C-311/18 Facebook Ireland and Schrems (Protection of individuals with regard to the processing of personal data - Transfers of personal data to third countries for commercial purposes), 2020-07-16

EDPS decision on the investigation into the European Commission's use of Microsoft 365

EDPS decision on the investigation into the European Commission's use of Microsoft 365, 2024-03-08

EDPS Opinion 12/2026 on the signing, provisional application and conclusion of the Protocol on the implementation of the Fisheries Partnership Agreement between the European Union and the Government of Seychelles

EDPS Opinion 12/2026 on the signing, provisional application and conclusion of the Protocol on the implementation of the Fisheries Partnership Agreement between the European Union and the Government of Seychelles, 2026-07-03

EDPS Opinion 29/2025 on the signing, provisional application and conclusion of the Protocol on the implementation of the Fisheries Partnership Agreement between the European Union and the Government of the Cook Islands

EDPS Opinion 29/2025 on the signing, provisional application and conclusion of the Protocol on the implementation of the Fisheries Partnership Agreement between the European Union and the Government of the Cook Islands, 2025-11-10

Commission Implementing Decision (EU) 2019/1874 of 6 November 2019 on the adequacy of the competent authorities of the People’s Republic of China pursuant to Directive 2006/43/EC of the European Parliament and of the Council (notified under document C(2019) 7854) (Text with EEA relevance)

Regulation (EU) 2017/2226 of the European Parliament and of the Council of 30 November 2017 establishing an Entry/Exit System (EES) to register entry and exit data and refusal of entry data of third-country nationals crossing the external borders of the Member States and determining the conditions for access to the EES for law enforcement purposes, and amending the Convention implementing the Schengen Agreement and Regulations (EC) No 767/2008 and (EU) No 1077/2011

Regulation (EU) 2022/123 of the European Parliament and of the Council of 25 January 2022 on a reinforced role for the European Medicines Agency in crisis preparedness and management for medicinal products and medical devices (Text with EEA relevance)

SET II

Decision 87/2010

Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (Text with EEA relevance)

Regulation (EU) 2021/1134 of the European Parliament and of the Council of 7 July 2021 amending Regulations (EC) No 767/2008, (EC) No 810/2009, (EU) 2016/399, (EU) 2017/2226, (EU) 2018/1240, (EU) 2018/1860, (EU) 2018/1861, (EU) 2019/817 and (EU) 2019/1896 of the European Parliament and of the Council and repealing Council Decisions 2004/512/EC and 2008/633/JHA, for the purpose of reforming the Visa Information System

Commission Implementing Decision of 21 August 2012 pursuant to Directive 95/46/EC of the European Parliament and of the Council on the adequate protection of personal data by the Eastern Republic of Uruguay with regard to automated processing of personal data (notified under document C(2012) 5704) (Text with EEA relevance) (2012/484/EU)

Regulation (EU) 2018/1240 of the European Parliament and of the Council of 12 September 2018 establishing a European Travel Information and Authorisation System (ETIAS) and amending Regulations (EU) No 1077/2011, (EU) No 515/2014, (EU) 2016/399, (EU) 2016/1624 and (EU) 2017/2226

Regulation (EU) 2019/1240 of the European Parliament and of the Council of 20 June 2019 on the creation of a European network of immigration liaison officers (recast)

Regulation (EU) 2018/1725 of the European Parliament and of the Council of 23 October 2018 on the protection of natural persons with regard to the processing of personal data by the Union institutions, bodies, offices and agencies and on the free movement of such data, and repealing Regulation (EC) No 45/2001 and Decision No 1247/2002/EC (Text with EEA relevance)

Commission Implementing Decision (EU) 2026/179 of 26 January 2026 pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council on the adequate level of protection of personal data by Brazil (notified under document C(2026) 373) (Text with EEA relevance)

Commission Decision of 31 January 2011 pursuant to Directive 95/46/EC of the European Parliament and of the Council on the adequate protection of personal data by the State of Israel with regard to automated processing of personal data (notified under document C(2011) 332) (Text with EEA relevance) (2011/61/EU)

Decision 2021/914

ANNEX Standard contractual clauses

Regulation (EU) 2018/1860 of the European Parliament and of the Council of 28 November 2018 on the use of the Schengen Information System for the return of illegally staying third-country nationals

Commission Implementing Regulation (EU) 2021/1772 of 28 June 2021 pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council on the adequate protection of personal data by the United Kingdom (notified under document C(2021)4800) (Text with EEA relevance)

2002/16/EC: Commission Decision of 27 December 2001 on standard contractual clauses for the transfer of personal data to processors established in third countries, under Directive 95/46/EC (Text with EEA relevance) (notified under document number C(2001) 4540)

Commission Implementing Decision (EU) 2016/2297 of 16 December 2016 amending Decisions 2001/497/EC and 2010/87/EU on standard contractual clauses for the transfer of personal data to third countries and to processors established in such countries, under Directive 95/46/EC of the European Parliament and of the Council (notified under document C(2016) 8471) (Text with EEA relevance)

Regulation (EU) 2024/1358 of the European Parliament and of the Council of 14 May 2024 on the establishment of Eurodac for the comparison of biometric data in order to effectively apply Regulations (EU) 2024/1351 and (EU) 2024/1350 of the European Parliament and of the Council and Council Directive 2001/55/EC and to identify illegally staying third-country nationals and stateless persons and on requests for the comparison with Eurodac data by Member States’ law enforcement authorities and Europol for law enforcement purposes, amending Regulations (EU) 2018/1240 and (EU) 2019/818 of the European Parliament and of the Council and repealing Regulation (EU) No 603/2013 of the European Parliament and of the Council

Commission Implementing Decision EU 2023/1795 of 10 July 2023 pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council on the adequate level of protection of personal data under the EU-US Data Privacy Framework (notified under document C(2023)4745) (Text with EEA relevance)

52012SC0072

Proposal for a — Directive Of The European Parliament And Of The Council — on the protection of individuals with regard to the processing of personal data by — competent authorities for the purposes of prevention, investigation, detection or prosecution of criminal offences or the execution of crimi

Proposal for a REGULATION OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL on the protection of individuals with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation) /* COM/2012/011 final - 2012/0011 (COD) */

FAQ - Invalidation du Privacy Shield - CEPD (en anglais)

21e rapport d’activité 2000

21e rapport d’activité 2000, 2023-11-01

22e rapport d’activité 2001

22e rapport d’activité 2001, 2023-11-01

Guide pratique - Analyse d'impact des transferts de données

Guide pratique - Analyse d'impact des transferts de données, 2025-02-01

23e rapport d’activité 2002

23e rapport d’activité 2002, 2023-11-01

Conseil d'État, Assemblée, 19/07/2019, 424216, Publié au recueil Lebon

Conseil d'État, Assemblée, 19/07/2019, 424216, Publié au recueil Lebon, 2019-07-19

Conseil d'État, Juge des référés, 13/10/2020, 444937, Inédit au recueil Lebon

Conseil d'État, Juge des référés, 13/10/2020, 444937, Inédit au recueil Lebon, 2020-10-13

Conseil d'État, 10ème - 9ème chambres réunies, 30/01/2024, 466115, Inédit au recueil Lebon

Conseil d'État, 10ème - 9ème chambres réunies, 30/01/2024, 466115, Inédit au recueil Lebon, 2024-01-30

Décret n°2019-536 du 29 mai 2019 — Article 4

Décret n°2019-536 du 29 mai 2019 — Article 4, 2019-06-01

Délibération 2021-082 du 15 juillet 2021

Délibération 2021-082 du 15 juillet 2021, 2021-07-15

Conseil d'État, 10ème - 9ème chambres réunies, 19/11/2024, 491644, Inédit au recueil Lebon

Conseil d'État, 10ème - 9ème chambres réunies, 19/11/2024, 491644, Inédit au recueil Lebon, 2024-11-19

Décret n°2024-512 du 6 juin 2024 — Article 6

Décret n°2024-512 du 6 juin 2024 — Article 6, 2024-07-08

Décret n°2019-536 du 29 mai 2019 — Article 125

Décret n°2019-536 du 29 mai 2019 — Article 125, 2019-06-01

Décret n°2024-512 du 6 juin 2024 — Article 6

Décret n°2024-512 du 6 juin 2024 — Article 6, 2024-06-08

Conseil d'État, Juge des référés, 12/03/2021, 450163, Inédit au recueil Lebon

Conseil d'État, Juge des référés, 12/03/2021, 450163, Inédit au recueil Lebon, 2021-03-12

Décret n°2019-536 du 29 mai 2019 — Article 126

Décret n°2019-536 du 29 mai 2019 — Article 126, 2019-06-01

Décret n°2005-1309 du 20 octobre 2005 — Article 3

Décret n°2005-1309 du 20 octobre 2005 — Article 3, 2018-08-04

Décret n°2005-1309 du 20 octobre 2005 — Article 101

Décret n°2005-1309 du 20 octobre 2005 — Article 101, 2018-08-04

GHAMS - 200.295.747/01

GHAMS - 200.295.747/01, 2023-04-04

CNIL (France) - Google Analytics (no case number)

CNIL (France) - Google Analytics (no case number), 2022-02-10

LG Köln - 14 O 472/23

LG Köln - 14 O 472/23, 2025-01-07

Cass.Civ. - 12967/2024

Cass.Civ. - 12967/2024, 2024-02-01

APD/GBA (Belgium) - 79/2025

APD/GBA (Belgium) - 79/2025, 2025-04-24

CNPD (Portugal) - Deliberação 2019/494

CNPD (Portugal) - Deliberação 2019/494, 2019-09-03

CE - 450163

CE - 450163, 2021-03-12

DSB (Austria) - 2022-0.296.352

DSB (Austria) - 2022-0.296.352, 2022-05-16

Persónuvernd (Island) - 2022020363

Persónuvernd (Island) - 2022020363, 2023-12-06

DPC (Ireland) - TikTok

DPC (Ireland) - TikTok, 2025-05-02

NAIH (Hungary) - NAIH-10362-1/2025

NAIH (Hungary) - NAIH-3561-4/2022

CTPDA (Spain) - RPS-2025/082

CTPDA (Spain) - RPS-2025/082, 2025-12-02

APD/GBA (Belgium) - 21/2022

CE - 466115

CE - 466115, 2024-01-30